diff --git a/Dockerfile b/Dockerfile
index 1c373fc..2e90b3f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,23 +1,22 @@
-FROM alpine:3.8
-ENV KUSTOMIZE_VER 3.5.4
-ENV KUBECTL_VER 1.17.3
-# Versions: https://pypi.python.org/pypi/awscli#downloads
-ENV AWS_CLI_VERSION 1.17.5
+FROM alpine:3.16
 
-RUN apk --no-cache update && \
-    apk --no-cache add ca-certificates groff less py-pip git make && \
-    pip --no-cache-dir install awscli==${AWS_CLI_VERSION} && \
-    rm -rf /var/cache/apk/*
+ENV SOPS_VER 3.8.1
+ENV KUSTOMIZE_VER 5.2.1
+ENV KUBECTL_VER 1.23.17
+# Versions: https://pypi.python.org/pypi/awscli#downloads
+ENV AWS_CLI_VERSION 1.29.82
 
-RUN apk --no-cache add curl gettext
+RUN apk --no-cache add curl gettext bash ca-certificates groff less \
+    py-pip git make curl gettext jq
+RUN pip --no-cache-dir install awscli==${AWS_CLI_VERSION} yq
 
 RUN mkdir /working
 WORKDIR /working
 
-RUN curl -L https://github.com/mozilla/sops/releases/download/v3.5.0/sops-v3.5.0.linux -o /usr/local/bin/sops \
+RUN curl -L https://github.com/mozilla/sops/releases/download/v3.7.3/sops-v${SOPS_VER}.linux -o /usr/local/bin/sops \
     && chmod +x /usr/local/bin/sops
 
-RUN curl -L https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv3.5.4/kustomize_v3.5.4_linux_amd64.tar.gz | tar xvz -C /usr/local/bin \
+RUN curl -L https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv${KUSTOMIZE_VER}/kustomize_v${KUSTOMIZE_VER}_linux_amd64.tar.gz | tar xvz -C /usr/local/bin \
     && chmod +x /usr/local/bin/kustomize
 
 RUN curl -L https://storage.googleapis.com/kubernetes-release/release/v${KUBECTL_VER}/bin/linux/amd64/kubectl -o /usr/local/bin/kubectl \
diff --git a/README.md b/README.md
index 271d378..87fbaaa 100644
--- a/README.md
+++ b/README.md
@@ -2,9 +2,10 @@
 Docker image for systems using Kustomize and kubectl.
 
 Included additions beyond base Apline:
-- Kustomize 3.5.4
-- Kubectl 1.17.3
-- AWS 1.17.5
+- Kustomize 5.2.1
+- Kubectl 1.23.17
+- AWS 1.29.82
+- sops 3.8.1
 - envsubst
 
 Working directory is set to `/working/` if you need to mount files.